user/settings/ssh.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

{ config
, lib
, pkgs
, ...
}: {
  programs.ssh = {
    enable = true;
    compression = true;
    controlMaster = "auto";
    controlPersist = "10m";
    hashKnownHosts = true;
    serverAliveInterval = 15;
    extraConfig = ''
      VerifyHostKeyDNS ask
      CanonicalizeHostname yes
      CanonicalizeFallbackLocal no
      CanonicalizeMaxDots 0
      CanonicalDomains home.arpa hydra-pinecone.ts.net
    '';
    includes = [
      "local.ssh_config"
    ];
  };
}